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Public  reporting  burden  for  the  collection  of  information  is  estimated  to  average  1  hour  per  response,  including  the  time  for  reviewing  instructions,  searching  existing  data  sources,  gathering  and 
maintaining  the  data  needed,  and  completing  and  reviewing  the  collection  of  information.  Send  comments  regarding  this  burden  estimate  or  any  other  aspect  of  this  collection  of  information, 
including  suggestions  for  reducing  this  burden,  to  Washington  Headquarters  Services,  Directorate  for  Information  Operations  and  Reports,  1215  Jefferson  Davis  Highway,  Suite  1204,  Arlington 
VA  22202-4302.  Respondents  should  be  aware  that  notwithstanding  any  other  provision  of  law,  no  person  shall  be  subject  to  a  penalty  for  failing  to  comply  with  a  collection  of  information  if  it 
does  not  display  a  currently  valid  OMB  control  number. 
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SECURITY  IS  A  BIG  PROBLEM 

•  It's  everywhere 

•  It's  complicated 

•  It's  constantly  changing  and  evolving 

•  It's  expensive  and  time  consuming 

•  It  conflicts  with  what  we  want  to  do 

•  It's  just  plain  HARD 

SOMEBODY  SHOULD  DO  SOMETHING! 
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WHO  IS  FIXING  THE  PROBLEM? 

•  The  Federal  Government  regulates  the 
security  of  its  system  by  requiring 
certification  and  accreditation 

•  NIST  sets  policies  and  guidelines  that 
are  free  to  the  public 

•  State  of  California  protects  Personal 
Information  with  the  Privacy  Act 

YOU  GUYS  ARE  ON  THE  HONOR  SYSTEM! 
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WHAT  TO  DO 

•  Get  educated 


Control 


Find  out  what  security  your 
organization  needs 

Put  security  controls  in  place 

Get  an  independent 
assessment 

Integrate  good  security 
practices 

Document  your  processes 


Train  your  people 
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QUESTIONS? 
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Security  is  not  a 
place.... 

It's  a  journey 


It's  up  to  you  to 
make  it  happen!! 


